AI Weekly Malaysia

Simon Willison hosted a fireside chat with Cat Wu and Thariq Shihipar from Anthropic's Claude Code team at the AI Engineer World's Fair, covering Claude Code, Claude Tag (a Slack integration), Fable, coding agent security, evals, and tool design. Key takeaways include Claude Tag now landing 65% of product engineering PRs for the Claude Code team, system prompts shrinking 80%, and the finding that adding examples or 'don't do X' lists to system prompts is no longer best practice for newer models like Fable 5 and Opus 4.8.

Why: For developers and vibe coders, this reveals how Anthropic itself uses coding agents at scale — dogfooding internally, relying on automated code review for outer layers, and shifting from micromanaging agent permissions to delegating implementation. The prompt engineering shifts (smaller prompts, fewer negative instructions, fewer examples) directly affect how builders should approach their own agent workflows today.

CapBay and MDEC have launched a US$50 million financing programme for Malaysia Digital (MD) Status tech companies, offering up to US$750,000 per company with rates from 6% per annum and repayment tenures up to 60 months. The programme uses AI-powered credit assessment that evaluates business fundamentals and growth potential rather than physical collateral, making it accessible to asset-light startups incorporated for as little as six months.

Why: This is a concrete, non-dilutive debt financing option for Malaysian tech startups and SaaS founders who often struggle with conventional bank loans due to lack of physical collateral. Founders building software, AI, or IP-driven businesses should evaluate whether MD Status eligibility and this programme can fund growth without giving up equity. The AI-based credit model also signals a broader trend of alternative lending infrastructure emerging locally for tech companies.

Simon Willison details a data exfiltration vulnerability in Anthropic's Claude web_fetch tool discovered by Ayush Paul. The exploit used a honeypot site with nested links to trick the AI into revealing private user information like name, location, and employer. Anthropic has since patched the issue by preventing web_fetch from navigating to additional links found within fetched content.

Why: For developers and founders building AI agents, this highlights the persistent risks of prompt injection and the 'lethal trifecta' where an LLM with private data and web access can be manipulated. Understanding these attack vectors is crucial for designing secure tool-use boundaries in AI applications.

The article highlights five trends from the AIE World's Fair 2026, emphasizing a shift from building with AI agents to building systems around them. This marks a new phase in AI engineering focused on systemic agent integration and orchestration.

Why: For Malaysian developers and SaaS founders, understanding this architectural shift is crucial for designing scalable, robust AI-driven products rather than just simple chatbot wrappers. It provides a roadmap for the next generation of local AI startups to build defensible infrastructure.

OpenAI announced ChatGPT Work, an agent designed to take action across apps and files, persist on a project for extended periods, and transform a high-level goal into completed work. This signals a shift from conversational assistance toward long-running, autonomous task execution.

Why: For builders and founders in Malaysia, this raises the bar for what AI-assisted workflows can achieve without manual orchestration. Teams building SaaS products or internal tools should evaluate how long-running agents change their own product roadmaps, customer expectations, and competitive landscape, especially as agent capabilities become table stakes.

SpaceXAI has launched Grok 4.5, described as the first Opus-class model following its acquisition of Cursor, the popular AI code editor. The announcement signals continued rapid output from the lab, potentially reshaping the competitive landscape for both frontier models and AI-assisted developer tooling.

Why: For Malaysian developers and vibe coders, a frontier model bundled directly into Cursor could change daily coding workflows, pricing, and model availability in the region. SaaS founders building AI-powered products should watch how Grok 4.5's capabilities and Cursor integration affect API access, latency from Southeast Asia, and competitive pressure on incumbents like Anthropic and OpenAI.

Lovable, an AI-powered app builder, is reportedly raising a $300 million round led by Menlo Ventures that could double its valuation to $13.2 billion. This massive potential valuation underscores the intense investor interest in AI-assisted development and 'vibe coding' platforms.

Why: For Malaysian developers and vibe coders, this signals that AI app builders are becoming heavily capitalized and will likely improve rapidly, potentially shifting how software is built. SaaS founders should note the enormous market appetite for no-code/low-code AI solutions, which could either serve as a foundation for new startups or create new competitive threats.

Roland Gavrilescu, co-founder of Introspection, explains the concept of autoresearch: a feedback loop that enables AI agents to self-improve through 'recipes' and introspection, while emphasizing that humans stay central to the software development process.

Why: For developers and founders building with AI agents, understanding self-improving loops can lead to more efficient and autonomous workflows, reducing manual iteration. This matters practically for teams looking to scale agentic systems while maintaining quality and control.

Together AI, an AI neocloud provider specializing in hosting open source models, raised $800 million at an $8.3 billion valuation, up from $3.3 billion in early 2025. The funding signals strong investor confidence in the shift toward open-weight models and specialist cloud infrastructure.

Why: Cheaper, more accessible hosting for open-source LLMs directly reduces infrastructure costs for developers and startups in Southeast Asia, accelerating AI adoption without lock-in to proprietary APIs. This could lower the barrier for building local AI agents and generative AI features.

Warp CEO Zach Lloyd argues that major software projects will soon be built by automated factories, shifting the developer role from coding to orchestrating AI-driven pipelines. He outlines what this shift means and how engineers can adapt.

Why: For developers and startup founders, understanding this shift is critical to staying relevant. It signals a future where tooling, workflows, and hiring may fundamentally change, potentially reducing manual coding but increasing the need for system design and oversight skills.

TechCrunch Disrupt 2026's Builders Stage will feature practical sessions on scaling startups, with 10,000+ attendees. The agenda covers growth strategies, fundraising, and operational excellence from experienced founders and investors.

Why: Malaysian startup founders can gain remote-friendly scaling tactics, learn from global peers' mistakes, and identify networking opportunities that apply to Southeast Asian markets without needing to travel.

Meta is developing a cloud infrastructure business to sell its excess AI compute and models, directly competing with AWS, Google Cloud, and Microsoft Azure. The move aims to monetize the company's massive AI investments and could reshape the cloud AI market.

Why: For the Malaysian tech community, this could mean a new cost-effective cloud provider, potentially lowering AI compute costs and reducing reliance on the current hyperscalers, which benefits startups and developers experimenting with AI/ML.

Cloudflare is launching a Monetization Gateway that lets you charge for any resource (APIs, datasets, MCP tools, etc.) behind their network, settling payments in stablecoins via the x402 protocol. No custom payments stack is needed, simplifying microtransactions for digital products.

Why: Removes the friction of building payment infrastructure, enabling quick monetization for APIs and AI tools. Stablecoin settlement could be advantageous in Southeast Asia’s fragmented payment landscape, allowing developers and startups to go to market faster with pay-per-use models.

U Mobile has fully migrated all customers from DNB's wholesale 5G network to its own ULTRA5G network, achieving over 85% population coverage. This completes Malaysia's transition to a dual 5G network model, with U Mobile now operating independently.

Why: Developers and startups building mobile-dependent services, IoT, or edge applications now have a second nationwide 5G infrastructure to leverage, potentially improving reliability, latency, and opening doors for differentiated connectivity products.

Sierra's Natalie Meurer discusses the convergence of forward deployed engineers and product engineers, driven by AI's need for deep customer integration. This shift redefines software engineering roles, making them more embedded in real-world workflows to build effective AI-native solutions.

Why: For developers and founders, understanding this trend helps in structuring teams that can rapidly iterate AI products directly with customers, reducing time-to-value and improving real-world AI deployment success.

Ahmad Osman argues on Latent Space that local (on-device) AI is rapidly catching up, from laptops and phones to enterprise infrastructure, enabling powerful models without cloud reliance.

Why: For Malaysian builders, local AI means lower latency, offline capability, data privacy, and cost savings, crucial for regions with uneven connectivity and for startups targeting underserved markets.

The creator built a live benchmarking tool called 'How I AI Bench' using Claude Code, then ran five frontier models through 64 blind prototype generations, PRDs, and agent voice tests to review Anthropic's Sonnet 5. The results challenged common assumptions about model performance.

Why: Provides hands-on, practical comparison of leading AI models for real-world developer tasks—prototyping, spec writing, and voice agents—helping the community choose tools based on actual output quality rather than hype.

Acti launches a cross-app AI keyboard for iOS and Android that lets users invoke custom AI shortcuts directly from the keyboard, aiming to make AI agents accessible anywhere you type.

Why: Brings AI agents into the most frequently used input interface on smartphones, potentially changing how users interact with apps and services in Southeast Asia's mobile-first markets.

X has launched a hosted MCP (Model Context Protocol) server, allowing AI applications to easily interact with X's API for reading and posting content. This standardizes how AI agents access X, reducing integration friction for developers.

Why: It simplifies building AI agents that can automate social media tasks, gather real-time data, or manage brand presence on X. For Malaysian developers and startups, this lowers the barrier to creating AI-powered tools that leverage X's platform without custom API plumbing.

WhyQ, a Malaysian food delivery startup, spent a decade pivoting from hawker-to-office delivery to residential delivery during COVID, and finally found a sustainable model in corporate dining. The article outlines how the company learned that scaling too fast burned cash, and a focused B2B approach now delivers better unit economics.

Why: Startup founders can learn from WhyQ's pivot: rapid B2C scaling without solid unit economics is a trap, and a lean B2B model (corporate meal plans) can unlock profitability in a competitive food delivery market. The lesson is directly applicable to SaaS and marketplace founders in Southeast Asia.

Anthropic released Claude Sonnet 5, a new frontier model with significant improvements in coding, reasoning, and agentic tool use. It outperforms previous Claude models on benchmarks and introduces longer context and better instruction following.

Why: For Malaysian builders, this means access to a state-of-the-art coding and agent-building tool that can accelerate prototyping, reduce costs, and enable more complex AI features in local SaaS products.

Hugging Face now integrates community-driven eval results (Every Eval Ever) directly onto model pages, allowing quick side-by-side performance comparisons. This makes model selection more transparent and reduces reliance on scattered benchmarks.

Why: AI practitioners and developers can save hours by instantly comparing real-world model performance for tasks like text generation, chatbots, or agent workflows. Crucial for those deploying models in resource-limited or cost-sensitive settings.

This week's Lenny's Newsletter covers two main topics: a review of the GLM-5.2 open-source LLM from China, which is competitive with top models on coding and reasoning benchmarks, and a deep dive into how Gusto used Claude Code to rapidly build a new product line, highlighting practical AI agent workflows for engineering teams.

Why: For developers and AI/ML learners, the GLM-5.2 review offers a cost-effective, open-source alternative to proprietary models. For startup founders and engineering leaders, the Gusto case study provides a real-world blueprint for using AI coding agents (like Claude Code) to accelerate product development, which is directly applicable to building in Southeast Asia's cost-sensitive market.

Gusto CTO Eddie Kim shares how a 5-person team shipped a new AI product line in 10 weeks using Claude Code, a permanent Zoom call, and no Figma, Jira, or traditional docs. They relied on AI-generated code, rapid prototyping, and blurred engineering/product roles.

Why: Demonstrates a radical, low-overhead approach to building AI products fast—relevant for Malaysian startups and developers looking to compete globally with lean teams and minimal tooling costs.

The Ministry of Digital has launched a national AI transformation initiative to accelerate AI adoption across Malaysia's public and private sectors, likely involving policy frameworks, infrastructure, and talent programs.

Why: This could unlock government grants, sandboxes, and contracts for local AI builders, while shaping the regulatory environment for AI development and deployment in Malaysia.